3bb59fc1790ff9f1f1d1df2c22afd709 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb59fc1790ff9f1f1d1df2c22afd709
Size

41KB
MD5

3bb59fc1790ff9f1f1d1df2c22afd709
SHA1

0f15f188e888b52c8531669efdf35099ed53d87b
SHA256

79bf105362d047c6cd42e02e1d9911409e909af925d758870a933a6bd000f5dc
SHA512

9065fc8c75f92ff524aede742e1f093eb2d149fff2a0e8a1cddf3fa55738d9ef056c642b3d1668934a30e7c03c03783c8cf142fcabb305475933762f45fd0d15
SSDEEP

768:MrR4dTSB06y0a/3X6CzLGYrAcPwboc/dpTWD:E06yLvKC1r/wEqdpSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb59fc1790ff9f1f1d1df2c22afd709

Files

3bb59fc1790ff9f1f1d1df2c22afd709
.exe windows:5 windows x86 arch:x86

7f802183105660d3a9b43a0e45faad58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
GetLastError

gdi32

SaveDC

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bzbt
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE